{"id":37658,"date":"2019-10-31T22:18:53","date_gmt":"2019-10-31T19:18:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kriticheskaya-uyazvimost-v-imap-servere-dovecot\/"},"modified":"2019-10-31T22:18:53","modified_gmt":"2019-10-31T19:18:53","slug":"kriticheskaya-uyazvimost-v-imap-servere-dovecot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-imap-servere-dovecot","title":{"rendered":"Vulnerabilitet kritik n\u00eb serverin IMAP Dovecot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb versionet korrigjuese<\/a><\/noindex> serverat POP3\/IMAP4 Dovecot<\/a><\/noindex> 2.3.7.2 dhe 2.2.36.4, si dhe n\u00eb shtes\u00ebn Pigeonhole 0.5.7.2 dhe 0.4.24.2 <\/a><\/noindex>, \u00ebsht\u00eb eliminuar nj\u00eb dob\u00ebsi kritike<\/a><\/noindex> (CVE-2019-11500<\/a><\/noindex>), q\u00eb lejon p\u00ebr t\u00eb arritur shkrimin e t\u00eb dh\u00ebnave jasht\u00eb buffers t\u00eb caktuar duke d\u00ebrguar nj\u00eb k\u00ebrkes\u00eb t\u00eb formatizuar posa\u00e7\u00ebrisht p\u00ebrmes protokolleve IMAP ose ManageSieve. <\/p>\n

Problemi mund t\u00eb eksploatohet n\u00eb faz\u00ebn para autentifikimit. Nj\u00eb exploit funksional akoma nuk \u00ebsht\u00eb p\u00ebrgatitur, por zhvilluesit e Dovecot nuk e p\u00ebrjashtojn\u00eb mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb dob\u00ebsis\u00eb p\u00ebr organizimin e sulmeve t\u00eb ekzekutimit t\u00eb kodit n\u00eb distanc\u00eb n\u00eb sistem ose t\u00eb organizimit t\u00eb rrjedhjes s\u00eb t\u00eb dh\u00ebnave konfidenciale. T\u00eb gjith\u00eb p\u00ebrdoruesit rekomandohen t\u00eb instalojn\u00eb sa m\u00eb shpejt p\u00ebrdit\u00ebsimet (Debian<\/a><\/noindex>, Fedora<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, SUSE<\/a><\/noindex>, RHEL<\/a><\/noindex>, FreeBSD<\/a><\/noindex>).<\/p>\n

Dob\u00ebsia \u00ebsht\u00eb e pranishme n\u00eb parser\u00ebt e protokolleve IMAP dhe ManageSieve dhe shkaktohet nga p\u00ebrpunimi i pap\u00ebrshtatsh\u00ebm i karaktereve me kod zero gjat\u00eb analiz\u00ebs s\u00eb t\u00eb dh\u00ebnave brenda vargjeve t\u00eb mbyllura n\u00eb citate. Problemi lejon shkrimin e t\u00eb dh\u00ebnave t\u00eb rast\u00ebsishme n\u00eb objekte, q\u00eb ruhen jasht\u00eb buffers t\u00eb caktuar (n\u00eb faz\u00ebn para autentifikimit mund t\u00eb ri-shkruhen deri n\u00eb 8 KB, nd\u00ebrsa pas autentifikimit deri n\u00eb 64 KB). <\/p>\n

Sipas opinioni<\/a><\/noindex> Inxhinier\u00ebt nga kompania Red Hat thon\u00eb se p\u00ebrdorimi i problemeve p\u00ebr sulme reale \u00ebsht\u00eb i v\u00ebshtir\u00eb sepse sulmuesi nuk mund t\u00eb kontrolloj\u00eb pozitat e shkruajtjes arbitrare t\u00eb t\u00eb dh\u00ebnave n\u00eb heap. N\u00eb p\u00ebrgjigje, shprehet opinioni se ky karakteristik e thellon ndjesh\u00ebm sulmin, por nuk e p\u00ebrjashton at\u00eb — sulmuesi mund t\u00eb provoj\u00eb disa her\u00eb q\u00eb t\u00eb exploatoj\u00eb derisa t\u00eb arrij\u00eb n\u00eb zon\u00ebn funksionale n\u00eb heap.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 POP3\/IMAP4-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Dovecot 2.3.7.2 \u0438 2.2.36.4, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 Pigeonhole 0.5.7.2 \u0438 0.4.24.2 , \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11500), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c IMAP \u0438\u043b\u0438 ManageSieve. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0420\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d, \u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37658","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia kritike n\u00eb serverin IMAP Dovecot | ProHoster","description":"N\u00eb versionet korrigjuese t\u00eb serverave POP3\/IMAP4 Dovecot 2.3.7.2 dhe 2.2.36.4, si dhe n\u00eb shtes\u00ebn Pigeonhole 0.5.7.2 dhe 0.4.24.2, \u00ebsht\u00eb eliminuar nj\u00eb dob\u00ebsi kritike (CVE-2019-11500), e cila lejon p\u00ebr t\u00eb arritur shkrimin e t\u00eb dh\u00ebnave jasht\u00eb buffers t\u00eb caktuar duke d\u00ebrguar nj\u00eb k\u00ebrkes\u00eb t\u00eb formatizuar posa\u00e7\u00ebrisht p\u00ebrmes protokolleve IMAP ose ManageSieve. Problemi mund t\u00eb eksploatohet n\u00eb faz\u00ebn para autentifikimit. Nj\u00eb exploit funksional akoma nuk \u00ebsht\u00eb p\u00ebrgatitur, por","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-imap-servere-dovecot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 IMAP-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Dovecot | ProHoster","og:description":"\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 POP3\/IMAP4-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Dovecot 2.3.7.2 \u0438 2.2.36.4, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 Pigeonhole 0.5.7.2 \u0438 0.4.24.2 , \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11500), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c IMAP \u0438\u043b\u0438 ManageSieve. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0420\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d, \u043d\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-imap-servere-dovecot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:18:53+00:00","article:modified_time":"2019-10-31T19:18:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37658","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 18:45:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:42:52","updated":"2026-01-23 18:45:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37658"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37658\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}